Repository Index

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

• oauth2
• spring-boot
• spring-cloud
• spring-cloud-alibaba

Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.

• hack
• hacking-tool
• social-engineering
• social-engineering-attacks

Simple session middleware for Express

• javascript
• nodejs
• expressjs
• middleware

Monitor linux processes without root permissions

• ctf
• pentesting
• privesc
• enumeration

TranslatedAn all-ages-friendly universal C# utility library, 码数吐司库 (Masuit Toast Library, "code number toast library"), containing commonly used operation classes, mostly static classes: encryption and decryption, reflection operations, weighted random selection algorithm, distributed short IDs, expression trees, LINQ extensions, file compression, multi-threaded downloading, hardware information, string extension methods, date and time extension operations, Chinese lunar calendar, large file copying, image cropping, captcha, resumable downloads, collection extensions, Excel export and other commonly used wrappers. Many features in one, with a code size of less than 2MB!

• lambda
• reflection
• datetime
• expression

PEDA - Python Exploit Development Assistance for GDB

Home to the Signal Protocol as well as other cryptographic primitives which make Signal possible.

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

• authorization
• permissions
• security
• zanzibar

Role-based Permissions for Laravel 5

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

• access-control
• authorization
• rbac
• rebac

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.

• browser-security
• cybersecurity
• de-anonymization
• ethical-hacking

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl

Steamless is a DRM remover of the SteamStub variants. The goal of Steamless is to make a single solution for unpacking all Steam DRM-packed files. Steamless aims to support as many games as possible.

• drm
• steam
• steamstub-drm
• csharp

Execution rails for agents. Equip your AI to work with sensitive enterprise systems. Give agents precise permissions and custom tools that work faster with fewer tokens.

This patch removes restriction on maximum number of simultaneous NVENC video encoding sessions imposed by Nvidia to consumer-grade GPUs.

The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.

• agents
• ai-agent
• llm
• integrations

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

• go
• golang
• security
• policy

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

• messaging
• authentication
• key-management
• identity

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

• compliance
• grc
• soc2
• gdpr

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management

• library
• web-framework
• shiro
• java

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

• owasp
• appsec
• security
• bom

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32

• arduino
• attack
• esp32
• hack

AI-powered penetration testing assistant using local LLM on linux (Parrot OS)

Java bytecode engineering toolkit

• java-bytecode
• java